Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
File:                     d6dcTie5EIG4MB56fE_ZA-AmGGI.mft (raw, json)
Hash identifier:          6DTDtjqJDyKba6os6idY9VoX67uiycNwbLWeB5AAh8s=
Subject key identifier:   33:24:3C:1C:A0:D3:A6:D5:B5:8B:1C:A9:08:65:0F:BA:0C:45:55:A7
Authority key identifier: 77:A7:5C:4E:27:B9:10:81:B8:30:1E:7A:7C:4F:D9:03:E0:26:18:62
Certificate issuer:       /CN=77a75c4e27b91081b8301e7a7c4fd903e0261862
Certificate serial:       0197BA7E5741473854DD073F8B156D8825FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
Manifest number:          0536
Signing time:             Sun 29 Jun 2025 07:02:11 +0000
Manifest this update:     Sun 29 Jun 2025 07:02:11 +0000
Manifest next update:     Mon 30 Jun 2025 07:02:11 +0000
Files and hashes:         1: d6dcTie5EIG4MB56fE_ZA-AmGGI.crl (hash: 00WDOCf2COe9WxnYxQemS/hepAIp+cNYkQ2Z97oSIsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 07:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7e:57:41:47:38:54:dd:07:3f:8b:15:6d:88:25:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a75c4e27b91081b8301e7a7c4fd903e0261862
        Validity
            Not Before: Jun 29 07:02:11 2025 GMT
            Not After : Jun 30 07:02:11 2025 GMT
        Subject: CN=33243c1ca0d3a6d5b58b1ca908650fba0c4555a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:57:1a:ae:98:d9:c4:e2:56:2d:eb:9a:2a:b5:
                    be:1d:5b:82:2a:11:6e:a3:d8:ca:62:d3:e0:aa:b0:
                    e7:72:7c:8b:89:05:1f:de:3d:cf:38:33:7e:72:89:
                    93:83:b0:e3:61:01:e9:98:a8:53:cb:06:1b:53:a7:
                    88:41:c4:4c:ce:56:84:6a:23:8e:39:60:b5:b7:9b:
                    46:9c:ca:14:0a:50:8b:21:ec:de:75:57:f8:78:c4:
                    08:05:35:a9:d3:af:e3:ef:00:3e:52:9f:33:7f:72:
                    e9:e2:88:40:8b:2d:cb:b2:b9:56:d6:58:29:bc:19:
                    d3:f2:2e:a8:27:9f:61:9d:04:35:98:98:36:56:5e:
                    2a:e0:86:5f:cb:b7:e3:6c:56:95:57:62:47:63:be:
                    b5:d7:bc:8f:26:c8:1e:21:51:b1:7c:28:ee:8c:09:
                    f2:02:4a:a1:f4:f5:2b:e3:19:5c:be:c9:8d:69:70:
                    0e:c9:ca:07:64:24:81:b4:03:ef:b1:75:b8:56:bf:
                    3e:49:1a:a0:f5:15:11:65:75:99:c7:92:e1:10:7a:
                    05:ca:6f:24:6c:93:d8:7c:a1:1f:f0:3b:62:d6:4a:
                    ea:35:96:90:81:3b:45:5f:39:d1:aa:ec:5b:b9:72:
                    ed:74:9e:32:77:68:89:95:78:4c:9b:b7:82:75:7a:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:24:3C:1C:A0:D3:A6:D5:B5:8B:1C:A9:08:65:0F:BA:0C:45:55:A7
            X509v3 Authority Key Identifier:
                keyid:77:A7:5C:4E:27:B9:10:81:B8:30:1E:7A:7C:4F:D9:03:E0:26:18:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:5a:07:b8:82:a7:e8:33:e1:9f:ed:cb:43:be:81:7c:7f:56:
         42:b4:bb:d2:96:27:4e:89:93:5a:84:6e:b2:e5:28:28:e0:61:
         1c:d3:88:a3:dd:30:fe:55:7e:b9:0d:1a:0c:8f:9d:8b:2d:cc:
         c5:38:e9:50:bf:ca:c4:8a:80:47:6d:c8:25:d0:12:e7:c4:aa:
         49:71:e8:e9:4f:d1:85:b8:e6:d3:aa:f9:a6:e9:e6:57:c9:4a:
         4b:e1:39:de:88:0e:b9:7f:02:64:e1:86:f5:da:b5:fd:a5:7d:
         bc:2f:ef:93:a9:a7:c9:8e:98:c7:db:ae:bf:d0:43:f8:a3:a2:
         1e:63:77:37:b1:d3:b4:79:01:cc:46:32:ce:d3:3b:09:55:75:
         93:d4:66:81:9b:d9:fa:3f:c2:d2:54:a0:72:c5:ba:8e:cc:b3:
         f5:dd:77:8f:33:6b:a0:79:e5:4f:ba:b2:ba:73:e4:ad:22:d1:
         9d:8f:d9:82:07:9c:40:e1:d3:06:c4:f6:a4:a5:24:a6:e0:da:
         46:e0:3e:d7:8a:ad:03:81:fb:ee:c1:ed:fc:6d:40:06:74:e0:
         d3:52:68:ad:6f:07:81:36:0d:93:55:fd:e1:6b:60:86:38:e9:
         cf:e8:64:2f:8a:37:d4:9f:c8:e5:f1:3f:64:96:eb:d8:7b:86:
         44:88:07:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:56:51 2025 by rpki-client